
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier: aJwq1vnUJkv31b1/5NrQM83un87xDXFWadgseZEE2N0=
Subject key identifier: 3D:33:D6:3D:12:2B:FC:96:CC:C8:F3:A9:D0:9F:19:25:F7:D5:D8:63
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A1DA938E85E33261DE5DD4FC22160DA0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number: 1676
Signing time: Sat 14 Nov 2026 15:01:05 +0000
Manifest this update: Sat 14 Nov 2026 15:01:05 +0000
Manifest next update: Sun 15 Nov 2026 15:01:05 +0000
Files and hashes: 1: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
2: 9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa (hash: nBNjrBaYUqrOCrF+/FR62x6XTWdXCs1MeSMbxH9/U3o=)
3: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
4: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
5: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
6: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
7: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
8: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
9: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
10: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
11: Qpqd5hHnjqSsp3sn5RVpGOfpq2g.roa (hash: usudWUM+M6fpK5Kxq+vyQ1DEZbBsRF3RxCtpG9oZ+NM=)
12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
14: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
15: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
16: eeAdU61dAEl487F3Ap6OJwVb3nY.roa (hash: Oh4fcwbJQjn9UMX01F08qYKp+6j3kQnbTRmMOn57gYE=)
17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
19: pW8tLTuchAg2ENsSB_m1O9IFRMk.roa (hash: DPFg9BfL6u//Ewp7gKsR79UQBua9iboqwpz2s8NPVM8=)
20: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: NimBEbbfMDfn3+Sc7cx9YnbnWCFATMQwdrNHUJYpfm8=)
21: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
22: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:8e:85:e3:32:61:de:5d:d4:fc:22:16:0d:a0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Nov 14 15:01:05 2026 GMT
Not After : Nov 15 15:01:05 2026 GMT
Subject: CN=3d33d63d122bfc96ccc8f3a9d09f1925f7d5d863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:42:e4:d0:81:9a:06:70:10:e5:47:eb:81:
8c:cd:7f:f1:b4:67:a1:cd:85:16:39:45:70:c8:6c:
97:af:ba:c8:e8:f2:91:bb:10:e8:58:59:15:26:4b:
a3:41:c5:b4:18:59:b2:5b:b0:52:dc:9f:0b:8c:b2:
a8:b3:44:fc:eb:95:03:13:53:ac:d9:50:6d:46:30:
a5:cc:6a:c1:b4:1c:6e:0c:2f:9e:64:f7:32:79:cb:
36:49:1b:39:0d:fa:14:3a:7a:f6:ad:20:69:17:41:
51:7f:a1:6b:0a:d7:a7:b3:fc:7e:5f:b2:56:4d:7c:
a4:d0:61:e9:cf:d2:2f:bc:c9:76:68:1b:95:2b:31:
d0:d0:bf:85:0b:38:21:ed:e7:08:a6:5d:9a:97:d2:
ba:66:a9:7e:ce:c5:5a:56:07:e4:7c:04:79:52:f7:
f0:3b:e8:85:4b:79:98:a0:0b:54:70:1c:31:fb:1f:
c8:7e:31:b9:bd:8c:c8:e5:81:1f:8f:8f:cf:76:87:
e5:c1:94:98:23:32:c6:b7:d3:0e:bb:c2:3b:36:86:
59:01:ec:76:e2:57:10:fe:f8:7f:7b:b4:31:83:8e:
f7:d9:7c:f3:33:b5:80:c4:da:f5:ee:8f:f9:ab:6b:
6f:33:8e:14:bb:5c:b9:2c:7e:59:0e:93:da:dd:23:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:D6:3D:12:2B:FC:96:CC:C8:F3:A9:D0:9F:19:25:F7:D5:D8:63
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:34:df:26:b4:d1:57:6a:7f:a0:a5:d5:43:98:5b:44:38:a4:
95:bf:fa:84:59:de:d8:43:36:a1:0f:18:24:01:93:ab:fc:1d:
a4:e7:18:3d:85:7a:e4:4b:48:5b:b0:cb:e8:71:69:ff:ea:80:
11:85:e9:2f:56:fe:5a:64:7c:2a:5d:35:e3:96:67:ae:84:b4:
db:58:0c:f3:6d:c8:6e:38:45:9e:78:1f:c5:2c:06:09:c4:3f:
73:43:06:75:46:dd:d8:36:77:b6:7f:89:a9:6b:69:ce:7d:b6:
3b:37:fb:63:7f:9a:ca:c4:5d:cf:9e:ff:d9:a6:92:fb:09:e3:
42:3e:28:93:5a:e8:a9:30:93:87:c7:d9:bc:a3:fc:43:55:8b:
e1:78:21:bb:ed:33:cd:66:a7:e5:b7:94:2c:e3:d7:f3:28:50:
56:08:c6:b5:c7:fb:aa:91:76:65:a2:ca:2b:6e:7d:7d:d4:e5:
75:4c:c6:2c:04:8d:88:c5:9a:2d:a2:3d:98:89:85:46:28:88:
25:0f:2d:58:0c:44:05:97:db:53:02:4f:bd:eb:58:af:16:11:
81:23:31:b6:95:51:de:22:1f:d1:88:65:81:7c:19:c1:f3:5d:
95:62:46:29:0e:78:f6:76:91:6e:19:a6:52:3f:03:31:50:8f:
ac:7a:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:39:00 2026 by rpki-client